Update readme with correct CORS Xml config